domain password length?

[Ryan]

To set the time for the password to expire and the user to be prompted for a
new one?

do I set this in the domain security policy under accounts and password
policy?

I have max and min if I want the password to be good for 6 months then be
prompted for a change should I have any of my boxes checked in domain users
and comps.?

under account I have password does not expire
user cannot change password unchecked
password never expires uncheced
and store in reversible encryp
checked

THanks

[Erik Szewczyk [MVP]]

I recomend against setting this up under the default domain security policy
as it will affect all users in the domain.

What I recomend doing is that you set a group policy object (GPO) for the
organizational unit (OU) containing your user accounts. In that GPO under
computer configuration>windows settings>security settings>account policies
you will find the maximum password age setting (the longest users can go
before they are forced to change their passwords).

The minimum password length setting stops them from changing their password
for a certain period. The idea being that you can set it to 1 day and will
effectivly stop users from being able to change their passwords repeativly
in order to circumvent the password history setting.

If you specify settings on the user account itself as you indicated it will
override whatever is set in the GPO and will only affect the account you
edit.

Good Luck

-Erik

Post by Ryan
To set the time for the password to expire and the user to be prompted for a
new one?
do I set this in the domain security policy under accounts and password
policy?
I have max and min if I want the password to be good for 6 months then be
prompted for a change should I have any of my boxes checked in domain users
and comps.?
under account I have password does not expire
user cannot change password unchecked
password never expires uncheced
and store in reversible encryp
checked
THanks